Safari 3 Beta Updated, Security Problems Fixed 302
Llywelyn writes "Apple has released an update to the Windows Safari 3 Beta. According to Macworld the updates '...include correction for a command injection vulnerability, corrected with additional processing and validation of URLs that could otherwise lead to an unexpected termination of the browser; an out-of-bounds memory read issue; and a race condition that can allow cross-site scripting using a JavaSscript [sic] exploit.' It is available through either the Apple Safari download site or through Apple's Software Update."
Well! (Score:5, Funny)
Excellent! Just one more thing... (Score:2, Funny)
Re:Excellent! Just one more thing... (Score:5, Insightful)
What they do want, however, is for developers to test their pages in Safari, not just FF and IE. Until the release, many developers used the fact that they couldn't run Safari on their development platform as a reason for not testing in Safari. Since Safari's CSS rendering is very compliant, most pages that render well in FF also render well in Safari. But Safari's JavaScript engine has a lot of quirks that developers won't catch unless they actually test in Safari. With the proliferation of AJAX-enabled sites out there, it's becoming more common for Mac Safari users to hit pages that just don't work for them. This is what Apple is trying to prevent.
But now that Safari is available in Windows (and hopefully Linux will follow), developers can easily test that their pages will work for Mac Safari users, even if they don't choose Safari as their default browser. This release many have lots of warts, but it's plenty good enough to fire up a couple of times a day to make sure that a specific site works.
Re: (Score:3, Interesting)
Personally, I would much rather have seen the Apple guys throw their support behind the Gecko engine, and Camino. It's not that KHTML/AWK is a bad browser base, I just think it would have been easier to u
More about the iPhone than the web (Score:5, Insightful)
Re: (Score:3, Insightful)
Re: (Score:2)
Re:Well! (Score:5, Insightful)
Re: (Score:2, Insightful)
C'mon folks, compared to Firefox it is very much void of features. But compared to Firefox most everything is void of features.
Horrible International Language support (Score:4, Informative)
Re:Horrible International Language support (Score:5, Informative)
Re: (Score:2)
Really? Seems that Unicode has been a part of the NT platform since 1992, Windows developers seem to do quite fine with letting Windows handle character and font support. I can make a 10 line application that handles most languages on Vista, and you are going to tell us that it is 'harder' on Windows?
Nope...
Re:Horrible International Language support (Score:5, Informative)
Unicode font rendering (automatically selecting the a font which contains a particular character, because generally no font contains all Unicode characters, and if one did exist, it probably wouldn't be the text font in use) is a different matter altogether.
Mac OS X does sane font substitution when faces don't include a particular character. On Windows, AFAIK, typing a Japanese glyph when using a font that doesn't support that code point will result in the square block--on the Mac, the type renderer will find the closest visual match (in terms of style) for a font that does include the code point and use that for those glyphs.
Re: (Score:2)
Re: (Score:3, Informative)
Re: (Score:3, Informative)
As another poseter pointed out, the handling of international character sets is different on windows than on the mac so its not surprising that something works properly in the mac version of safari and not in the windows beta. Obviously apple will need to fix these issues, but its not surprising.
Naturally (Score:5, Insightful)
Re: (Score:3, Informative)
I doubt they'll be as quick in the future.
Sure they'll be this quick in the future, right up until it leaves beta, then they'll actually have to do full regression tests which will take longer and have a turn around time aout the same as the Mac version.
It always amazes me when I hear people complaining about bug fix times from vendors who take between one and six weeks to get a bug into production. Those are normal turn around times assuming the vendor starts work immediately on a development/testing cycle for a large, production software proj
Re: (Score:3, Informative)
http://www.howtocreate.co.uk/safaribenchmarks.htm
I wonder if... (Score:5, Funny)
Re: (Score:2)
I can't imagine any reason that anyone would want to actually use Safari
Hmm... is there a reason not to use it just because its market share is substantially lower? As long as it renders the pages as intended and works with all the services I use on the net I don't see a point in this argument.
Instead, I've encountered so many problems using Firefox 2.0 on an intel mac like random crashes or running out of RAM for no reason. My MacBook sounds like a hair-dryer whenever I visit a flash-page on Firefox. Maybe my configuration is just borked, but Safari seems to be way quicker
Re:I wonder if... (Score:4, Insightful)
Re: (Score:3, Interesting)
Re: (Score:3, Insightful)
I'd like to continue pushing for that. Otherwise, we all will be pushed back to Windows and IE (well, some browser/os combo).
Re: (Score:2)
I'm running FF 2.0.0.1- don't know if that helps. I'm also running Ad-block and Flashblock, that may help.
Re: (Score:2)
Safari on Windows is definitely not there yet. My main problem with Safari on Windows is the same problem I have with Firefox on the Mac: It feels foreign. There's other problems, too: the spellin
Re: (Score:2)
All that said, I stick to Firefox because there are some e
Re: (Score:2)
Neither Gecko nor WebKit/KHTML are bad engines, mind you.
Re: (Score:2)
My three column website CSS is best viewed with Safari, not that I intended it to, but it does..
Good sprint, but does Apple have stamina? (Score:2, Interesting)
Re: (Score:2)
Now if they would fix the text problem... (Score:3, Informative)
Re: (Score:2)
Anyways, the beta works like a charm for me an I'll keep using Safari *if* someone ports Adblock or writes a good plugin which works as good as Adblock. I personally don't like PithHelmet that much.
Re:Now if they would fix the text problem... (Score:5, Informative)
Mini-review of Safari on my home Vista install: The non-standard Windows UI is annoying. If I wanted to resize only from the bottom right corner I would have bought a Mac. The lack of an advertisement blocker makes the software a poor alternative to Firefox. The bundling is annoying. I don't want Quicktime. Quicktime is ugly, ugly software. It makes Firefox crash, grabs all sorts of MIME types, throws its icon up on the desktop every time it updates no matter how many times you delete the icon, it installs a systray icon (for a media player?!? come on), and it won't play full screen videos. ITunes is only a good media player if you own a Ipod. Don't want that either. The Apple update service is annoying as well. Why a separate service? I want my apps to check for updates when I start them or not at all.
Good points? Well, Safari displays web pages, I guess. Good for Apple.
Re:Now if they would fix the text problem... (Score:4, Informative)
Re: (Score:2)
Maybe I didn't make myself clear... No text shows up in the browser whatsoever, unless it's actually in a graphic on the page I'm looking at. Not even the menu names or items on the menus (e.g., File, Edit, View, etc...). The o
If it was True OPEN SOURCE SOFTWARE (Score:2, Funny)
and fixed WAY faster copyleft knockoff $Apple$
I, for one, refuse to acknowledge the EXISTANCE of closed source browsers.
Live Free or Die
Semi-OT: is there a hotkey for tab-switching? (Score:2)
Re: (Score:3, Informative)
I thought it was just an SDK? (Score:2)
D'oh... (Score:2)
Security is not the big problem (Score:4, Interesting)
As a web developer, I'm pleased as punch that they've released a Windows version of Safari that renders pixel-for-pixel the same as the OS X version (it really does, I checked). However, Safari on Windows is not even in the running as far as being a candidate as a full-time browser on Windows. The user experience is simply too painful.
* I didn't say they should not focus on security. They most definitely should.
Awesome, now I can read /. again! (Score:3, Informative)
But maybe it's just as good to not have any sensationalist headlines to mislead you?
Why so negative on Safari??? (Score:5, Interesting)
Comment removed (Score:5, Informative)
Re:Gee (Score:5, Insightful)
Consider this - this is just a "preview" product - and not even on "their" platform. Its good publicity. They're handling the vulnerabilities the same way Tylenol handled the poisoned pill problem - actively, instead of with their head up Gates/Ballmer's rear end going "no problemo".
Comment removed (Score:4, Interesting)
You cite "Patch Deployment Costs" as a reason... (Score:2)
That just begs the question:
Why are patch deployment costs on Windows so high? The only real rationale for this on the Wikipedia page you reference is "a patch issued by Microsoft would break existing functionality", and that's a matter of code, not physics constraints.
-- Terry
Re:You cite "Patch Deployment Costs" as a reason.. (Score:2)
Re: (Score:3, Insightful)
Re: (Score:3, Interesting)
Safari being the partly-OSS product it is, it might be a good idea for Apple to release weekly or nightly builds. That could generate quite a bit of attention for Safari/Windows, because people would recognize "beta" as an ongoing process.
Comment removed (Score:4, Insightful)
Re: (Score:2)
"complex software written for use on a wide variety of configurations WILL HAVE BUGS"
A buffer overflow has nothing to do with how you configure your PC. Neither do dangling pointers. They're errors - not "bugs". They don't craw into your PC when you're not looking.
I'll leave it to the brits
Re: (Score:2)
Mistakes are not bugs. (Score:3, Insightful)
Calling them "bugs" is a way for us to avoid blame for making mistakes, either in the code itself or in the processes we use to plan and implement that code.
Calling an error a "bug" makes it sound like it could have crawled in there on its own. ("Gee, I don't know how that bug got in there. I'll fix it.")
It didn't just crawl in there on its onw, and its not a feature or a bug, its a mistake, pure and simple. And someone made it.
We (hopefully) learn from our mistakes. Labelling them "bugs" makes it les
Re:Bugs reported one day, fixed the next. (Score:5, Insightful)
Re: (Score:2)
There is little evidence that apple actually cares to compete in the browser space. If window Safari is really only out there for iPhone developers then its not really even necessary to fix security holes (of course that would be bad because some people would use it as a general purpose browser, but you get my point).
All they really have to do is keep it compatible with the version on the iPhone and it will suit their needs. Hopefully they will make it at least as good as safari on the mac, which is not n
Re:Bugs reported one day, fixed the next. (Score:4, Insightful)
Re: (Score:2)
Giving web developers on windows a good way to test against safari is a great benefit, but if that was the real reason behind this you would have seen this a long time ago. I believe the iPhone is the primary motivating factor because of the timing of the events.
I disagree (Score:5, Interesting)
Having Safari available on Windows removes the 'Apple Only' hardware requirement for any company who wants to develop Web 2.0/AJAX applications that run on the iPhone which opens Safari development to a much much larger pool of developers.
Re: (Score:3, Insightful)
Re: (Score:2)
because all browsers behave a bit differently and while you might get away with a bit of idiosyncrasy on a web site you really want to know exactly what your iPhone "application" is going to look and act like. What if IE has a bug with the way it handles something and you code around that bug (possibly without even knowing its IE specific) then you go to release the software for the iPhone and it dosn't work (or doesn't look as good as it should).
Re: (Score:3, Insightful)
That goes without saying (Score:3, Funny)
Re: (Score:3, Funny)
*
*
* 03% - Cowboy Neal (Windows)
* 14% - Internet Explorer
* 19% - Cowbow Neal (Linux)
* 22% - Safari (Macintosh)
* 35% - FireFox (Windows)
* 99% - FireFox (Linux)
* Profit!
Browser Statistics (Score:2)
Re:Browser Statistics (Score:5, Funny)
* 7.97% - Other
Mod Parent Up (Score:2)
I'm glad someone finally defined what Web 2.0 is. It's Web 1.0 multiplied by the hype.
Re: (Score:2)
Re: (Score:2)
Plus: One can assume that it takes less work to fix a new program which has a clean and fresh design. The code base doesn't get more logical/cleaner when you already applied a gazillion patches (e.g. IE 6)
I'll try to update now - for some reason Software Update tells me that there's nothing to install.
Re: (Score:2)
Re: (Score:2)
Because of one single quick patch...?
Apple had to do it to not look like complete fools, and that "beta" is still pretty much like an "alpha".
Re: (Score:2)
I seriously figured they'd fix it in the nightlies, and wouldn't issue a fixed beta until they had, well, a new beta.
Re: (Score:3, Informative)
Re:not worth it (Score:5, Informative)
Leave the box blank and the check-box ticked and it still downloads.
Re: (Score:3, Insightful)
How often do you have to reinstall Windows?
I am not a big Windows fan but I go years between reinstalls without any problems.
I only do a reinstall when I get new System or a new Drive.
Re: (Score:2)
Re: (Score:2, Informative)
Re: (Score:2, Redundant)
Re:not worth it (Score:5, Funny)
Best advertisement for OS X I've seen all day. :P
Re:I dont care what you say (Score:5, Interesting)
Perhaps what they might have done is require an Apple Developer Connection account to download instead of making it available through general release.
Re: (Score:2)
Re: (Score:3, Interesting)
OK. Here is what I think. I use Safari as my main browser on my Mac which I use for all personal computing. It's a nice browser. I started using it to try it, and I've stuck with it. I'm happy with it for the most part.
Now I've tried it on Windows. It's cute. Even if it was perfect, it wouldn't replace FireFox because at this point I'm addicted to FlashBlock on my work PC. Things I use often have annoying flash ads and the computer isn't that fast in the first place. I'm glad it's there, and if I was going
Re: (Score:2)
Regardless of how it was distributed this crap was not news. Its not surprising that there are major flaws in beta software. It is also not surprising that the bugs were fixed. None of this is news, none of it is particularly interesting, its really just something to let geeks get all up in arms and have yet another flame war between the people who hate apple and the people who love apple.
Folks talk a lot about how certain tech journalists post ill informed garbage because it gets people all rilled up an
Re: (Score:3, Insightful)
I give the Safari Browser a 0/10 for now. There's also the annoying issue of closing the application behind it when clicking in the corner of the screen when it's maximized. It doesn't close Safari, but whatever window was behind it. I'
Re: (Score:2)
Re: (Score:2)
I thought that was Steve's job?
clearly I needed a sarcasm tag for this post... nobody reads past the bit you quoted. I don't actually hate apple, or safari, what I hate is that all of this has been passed off as news and that everyone on this site is lapping it up.
Re: (Score:2)
Re: (Score:2, Informative)
It's a beta. Safari 3 hasn't been released yet. The only version number worth paying attention to is the build number (and that assumes it gets updated properly--I don't know what the updated version's is, but I assume it's not 522.11)
And also, did you report the issue to Apple?
Re: (Score:2)
http://img443.imageshack.us/img443/7788/safari3bet ayl4.png [imageshack.us]
(not just Slashdot, pretty much anywhere, besides the Safari welcome page)
The funniest I've seen was this one though...
http://img39.picoodle.com/img/img39/8/6/14/f_safar im_49fc728.jpg [picoodle.com]
Re: (Score:2)
When I tried it, I couldn't see anything wrong with any fonts.
I also couldn't see anything right with any fonts.
There was just no text whatsoever!
However, "Find" works, and it does this really nice Core Animation-style highlighting, except that you can't see the text that it highlights!
Re: (Score:2)
If it doesn't have Adblock, an automatic filterset updater, Webmail Compose and Google Browser Sync, I wouldn't use it. Those are the extensions I wouldn't want to do without. NoScript is another one.
Re: (Score:2)
Everyone needs Adblock Plus. The difference it makes in browsing is astounding. I recommend it (along with Firefox, of course) to anyone and everyone.
-matthew
Re: (Score:2)
Re: (Score:2)
Re: (Score:3, Informative)
Re: (Score:2)
Firefox is simple if you don't install any extensions. You don't have to, and you also say they don't need to, so what's the problem here?
Firefox is also pretty fast, and has a much better scrutinized security than Safari on Windows.
Re: (Score:2)
Preferences menu, Appearance tab.
Re: (Score:3, Interesting)
It's not a bug (Score:4, Informative)